Bug#169743: marked as done (kscd: cddb files world-writeable)
Your message dated Wed, 15 Dec 2004 22:17:12 +0100
with message-id <20041215211712.GA12721@chistera.yi.org>
and subject line kscd: world-writeable files
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 19 Nov 2002 13:36:25 +0000
>From andrea_borgia@libero.it Tue Nov 19 07:36:25 2002
Return-path: <andrea_borgia@libero.it>
Received: from adsl-117-59.38-151.net24.it (shanpu.ethernet) [151.38.59.117]
by master.debian.org with esmtp (Exim 3.12 1 (Debian))
id 18E8YC-0001oT-00; Tue, 19 Nov 2002 07:36:24 -0600
Received: from nausicaa.ethernet (nausicaa.ethernet [192.168.1.4])
by shanpu.ethernet (8.12.6/8.12.6/Debian-6Woody) with ESMTP id gAJDaJQY001344;
Tue, 19 Nov 2002 14:36:19 +0100
Received: from nausicaa.ethernet (localhost [127.0.0.1])
by nausicaa.ethernet (8.12.6/8.12.6/Debian-6Woody) with ESMTP id gAJDaJcv002858;
Tue, 19 Nov 2002 14:36:19 +0100
Received: (from andrea@localhost)
by nausicaa.ethernet (8.12.6/8.12.6/Debian-6Woody) id gAJDaJXM002856;
Tue, 19 Nov 2002 14:36:19 +0100
Message-Id: <200211191336.gAJDaJXM002856@nausicaa.ethernet>
From: Andrea Borgia <andrea_borgia@libero.it>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: kscd: world-writeable files
X-Mailer: reportbug 1.50
Date: Tue, 19 Nov 2002 14:36:19 +0100
Delivered-To: submit@bugs.debian.org
X-Spam-Status: No, hits=0.8 required=5.0
tests=MSG_ID_ADDED_BY_MTA_3,SPAM_PHRASE_00_01
version=2.41
X-Spam-Level:
Package: kscd
Version: 4:2.2.2-8
Severity: normal
After manually solving the issue reported in #133590 by creating the
relevant categories under /var/lib/cddb, I noticed that kscd creates files
with mode 0666. Ownership is ok (username.audio).
IMHO, 0664 would be more than enough and probably 0660 would be fine, too,
considering that users able to run kscd are in the audio group.
-- System Information
Debian Release: 3.0
Architecture: i386
Kernel: Linux nausicaa 2.4.19nausicaa-gcc-3.2 #1 Tue Nov 12 22:36:20 CET 2002 i686
Locale: LANG=it_IT@euro, LC_CTYPE=en_IE@euro
Versions of packages kscd depends on:
ii cddb 2.6-14 CD DataBase support tools
ii kdelibs3 4:2.2.2-13.woody.3 KDE core libraries (runtime files)
ii libaudiofile0 0.2.3-4 The Audiofile Library
ii libc6 2.2.5-14.3 GNU C Library: Shared libraries an
ii libesd0 0.2.23-3 Enlightened Sound Daemon - Shared
ii libfam0 2.6.6.1-5.2 client library to control the FAM
ii libjpeg62 6b-5 The Independent JPEG Group's JPEG
ii libpng2 1.0.12-3.woody.2 PNG library - runtime
ii libqt2 3:2.3.1-22 Qt GUI Library (runtime version).
ii libstdc++2.10-glibc2. 1:2.95.4-11woody1 The GNU stdc++ library
ii xlibs 4.1.0-16 X Window System client libraries
ii zlib1g 1:1.1.4-1 compression library - runtime
---------------------------------------
Received: (at 169743-done) by bugs.debian.org; 15 Dec 2004 21:17:16 +0000
>From asp16@alu.ua.es Wed Dec 15 13:17:16 2004
Return-path: <asp16@alu.ua.es>
Received: from 84-120-66-96.onocable.ono.com (chistera.yi.org) [84.120.66.96]
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1CegWK-0004Lq-00; Wed, 15 Dec 2004 13:17:16 -0800
Received: from userid 1000 by chistera.yi.org with local (Exim 4.34)
id 1CegWG-0003U8-Qc; Wed, 15 Dec 2004 22:17:12 +0100
Date: Wed, 15 Dec 2004 22:17:12 +0100
From: Adeodato =?iso-8859-1?Q?Sim=F3?= <asp16@alu.ua.es>
To: Andrea Borgia <andrea_borgia@libero.it>
Cc: 169743-done@bugs.debian.org
Subject: Re: kscd: world-writeable files
Message-ID: <20041215211712.GA12721@chistera.yi.org>
References: <200211191336.gAJDaJXM002856@nausicaa.ethernet>
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
In-Reply-To: <200211191336.gAJDaJXM002856@nausicaa.ethernet>
X-No-CC: Please respect my Mail-Followup-To header
User-Agent: Mutt/1.5.6+20040907i
Delivered-To: 169743-done@bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2004_03_25
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-1.8 required=4.0 tests=BAYES_00,FROM_ENDS_IN_NUMS
autolearn=no version=2.60-bugs.debian.org_2004_03_25
X-Spam-Level:
* Andrea Borgia [Tue, 19 Nov 2002 14:36:19 +0100]:
> Package: kscd
> Version: 4:2.2.2-8
> Severity: normal
> After manually solving the issue reported in #133590 by creating the
> relevant categories under /var/lib/cddb, I noticed that kscd creates files
> with mode 0666. Ownership is ok (username.audio).
> IMHO, 0664 would be more than enough and probably 0660 would be fine, too,
> considering that users able to run kscd are in the audio group.
kscd now defaults to ~/.cddb and uses sane permissions (644).
closing this old bug.
--
Adeodato Simó
EM: asp16 [ykwim] alu.ua.es | PK: DA6AE621
If you want the holes in your knowledge showing up try teaching someone.
-- Alan Cox
Reply to: